Velociraptor

Walkthrough summary

Velociraptor TryHackMe walkthrough with 23 answered prompts and lab methodology notes.

Sample prompts covered

• Using the documentation, how would you launch an Instant Velociraptor on Windows?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the hostname for the client?
  Open the walkthrough page to inspect the full answer and command flow.
• What is listed as the agent version?
  Open the walkthrough page to inspect the full answer and command flow.
• In the Collected tab, what was the VQL command to query the client user accounts?
  Open the walkthrough page to inspect the full answer and command flow.
• In the Collected tab, check the results for the PowerShell whoami command you executed previously. What is the column header that shows the output of the command?
  Open the walkthrough page to inspect the full answer and command flow.